DFIRHub

TeleportConnect

Teleport Connect artifacts

  • Apps
  • 4 paths
  • regex:(app_state\.json|app_config\.json)tshd.crt
  • Per-user data
  • Version 1
  • Paul Cabon CERT Almond

Paths on disk

4 paths

Paths use Windows environment variable syntax

References

1 link